26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
Summary
An independent researcher discovered over 26,400 valid cloud and AI credentials exposed in public repositories on Gitee. These credentials, left by developers, were found to still be functional when tested, posing a significant security risk.
IFF Assessment
FOE
The exposure of a large number of valid credentials for cloud and AI services represents a significant risk to organizations, potentially enabling unauthorized access and further attacks.
Defender Context
This incident highlights the critical importance of secure coding practices, particularly the avoidance of hardcoding sensitive credentials in public repositories. Defenders should implement automated scanning tools to detect such exposures and enforce stricter access controls and credential rotation policies.